Automated compliance with Chile's Ley 21.719
ARCO Legal is the SaaS platform that automates ARCO rights, treatment activity registry, impact assessments, policy generation, breach notifications to the Data Protection Agency, and the data subject portal.
What it automates
Six modules designed for the operational processes of compliance — not just the paperwork.
ARCO Rights Management
Automates the full cycle of Access, Rectification, Cancellation, and Opposition: receives requests, validates identity, routes to the responsible team, and delivers response within legal timelines.
Treatment Activity Registry
Keep your RAT automatically updated from your systems: databases, CRM, marketing tools, internal SaaS. Every change is traced with timestamp, responsible party, and legal basis.
Impact Assessments
Generate DPIA templates adapted to your type of treatment. Approval workflow, versioning, and automatic archiving — no writing the assessment from scratch each time.
Policy and Clause Generator
Privacy policies, consent clauses, cookie notices — generated and maintained from your RAT. When a treatment changes, policies update themselves.
Breach Notifications
Guided workflow to notify the Data Protection Agency and data subjects within legal timelines. Pre-approved templates, evidence registry, and full traceability.
Data Subject Portal
Public portal where data subjects can exercise their rights directly — no emails or scattered forms. Reduces operational tickets and improves the subject's experience.
Why it matters now — and why we built it
Ley 21.719 comes into full effect December 1, 2026, with sanctions up to 20,000 UTM (~$1.3M USD) or 4% of the violator's annual revenue — whichever is greater. Companies still managing compliance in Excel and email have an increasingly narrow operational margin.
ARCO Legal was born from our own need. We process sensitive data from candidates for our own job openings — résumés, employment contracts, background checks — and learned first-hand how operationally complex it is to comply with the Law without slowing down the selection process. We built what we needed, and today it's the platform that hundreds of Chilean companies use to comply without stalling their operations.
Who ARCO Legal is for
Chilean and LATAM companies that process personal data — from mid-market to enterprise.
Legal and compliance teams
Reduce operational compliance work and maintain traceable evidence for the Agency.
HR teams
Manage candidate and employee data with current legal basis and ARCO rights workflow.
Marketing teams
Keep databases, consents, and clauses aligned with the RAT — no rework when a vendor changes.
SaaS, fintech, health-tech, and retail
Process large volumes of data subject data in Chile and need scalable — not manual — compliance.
Need a custom integration?
If you need to connect ARCO Legal with your ERP, CRM, HR system, or other internal systems, our Integrations team can help. We are the same team that built the integrations ARCO Legal uses today.
23people Integrations service — our own engineers
Let's talk about your integrationReady to simplify your compliance?
Visit ARCO Legal for pricing, plans, and to schedule a demo. Or talk to 23people first if you want to understand how we use it ourselves.